$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft File: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json) Hash identifier: F1Pa8qz4yjoRHaY20eDF92hQLQqSemw5S66wFWmWXMk= Subject key identifier: DE:9F:30:0E:5F:6C:2E:40:F4:05:F0:11:9F:21:0E:44:F4:0C:5F:BD Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Certificate serial: 03AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft Manifest number: 038A Signing time: Sun 01 Mar 2026 01:44:26 +0000 Manifest this update: Sun 01 Mar 2026 01:44:26 +0000 Manifest next update: Sun 08 Mar 2026 01:44:26 +0000 Files and hashes: 1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: bS8TMtEGLW1OAc+oBUC5+w3uIlqnl6CEHp9UAYmhwEs=) 2: 2E8796D201D811F1B1EB0BE0366F56BC.roa (hash: wdUj6WOSwN2+6Eu05EUZtWf00hx9csSWIN6a/3PuGoQ=) 3: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: yhsDMBW1yOy0Jq2CHVI1ejI5EG1pZPsxlabs6cbZ8HE=) 4: 7AD7FD049DE911F0A23C8031C4F9AE02.roa (hash: CUjzOk4Yzo5HfsbOc1jf19caQKnMTxc8EO2EcR/1U8c=) 5: 912F8C1C121411F1990B85DE1A3D8C67.roa (hash: NoDfJtA2TZlJ5kY2VtYKd70lvC57L3eEvBtzKIjBMq4=) 6: 50068D0EAB2511F0BE8B7031C4F9AE02.roa (hash: 3si+tWTUxYtlbg8B4teW0ytOCh/X9C2+iKP5p3DDols=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 943 (0x3af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Validity Not Before: Mar 1 01:44:26 2026 GMT Not After : Mar 8 01:44:26 2026 GMT Subject: CN=69a399fa-2688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:24:ce:79:4d:c5:35:13:f0:a3:ac:81:b1: 1a:9c:6d:3b:80:d6:fa:9e:06:de:a0:da:2c:1e:52: f7:cb:2b:ec:74:6e:92:ba:aa:15:01:08:4e:92:f7: a4:fb:00:c2:cb:e4:28:76:85:cb:c1:26:e1:97:e4: bc:cd:7d:46:2e:36:22:56:b3:38:25:fd:b8:79:ae: a5:93:4d:08:ce:c7:4b:6f:f9:c4:db:53:71:e5:83: d2:2c:2b:67:12:99:b4:36:38:14:42:68:3a:36:87: 23:3c:92:2b:78:52:7b:1b:5d:82:5d:23:e2:a4:8a: 64:6f:26:9a:da:95:d7:9c:86:86:46:ea:1d:03:8b: 00:a3:29:21:8e:f5:59:6a:ab:98:39:5e:bd:5a:a8: e8:9e:19:51:8c:6b:fe:ef:c0:cf:7c:25:5f:87:2c: 41:60:0c:65:4d:ef:9c:47:45:45:ea:b7:29:06:cb: 51:2c:51:94:62:e3:47:15:9e:1c:ef:6d:b2:b6:f8: d4:dd:f1:a3:47:cb:d9:11:82:7b:3b:f1:3c:24:40: 11:e8:2a:4e:a0:4c:02:af:6d:c7:79:46:b2:e4:ca: 36:3c:50:87:8f:39:f8:4f:14:82:53:d3:a5:f1:db: df:50:11:9d:f7:eb:1a:0a:f7:fb:f1:14:2b:f9:3b: 9c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9F:30:0E:5F:6C:2E:40:F4:05:F0:11:9F:21:0E:44:F4:0C:5F:BD X509v3 Authority Key Identifier: keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8a:c0:b1:e5:27:6a:86:d8:54:86:3d:0e:90:98:46:51:02: 18:d4:3d:2e:a7:18:d2:ed:6b:2b:8b:cb:d9:e6:b6:9c:2a:41: 75:73:05:9d:43:46:38:aa:8a:4f:b0:00:df:33:e5:cf:a4:bd: 55:ff:96:86:66:6e:89:02:d6:cc:d0:21:d5:3b:b5:5f:28:47: 68:37:d8:7d:f7:e2:76:36:60:41:63:f2:c3:d5:b5:47:aa:eb: 96:51:0e:5b:f0:36:28:51:31:0c:76:9f:0b:2f:a7:47:b3:e8: 72:19:cd:4c:21:34:3e:de:9f:29:ec:4c:c6:b9:69:50:e2:ac: 12:7d:7f:8a:ab:e3:4f:20:9d:c6:19:87:45:c2:15:d4:42:8e: 9d:c4:be:46:a3:59:5b:43:02:e7:33:2f:8e:95:3e:34:b0:6a: 74:d4:f8:b3:f9:b7:32:e6:8c:15:d8:2a:76:ad:2d:68:93:a8: d2:d6:6a:34:11:61:69:c5:bc:51:85:22:6c:d2:97:fb:b4:7a: a5:6c:78:cf:ca:24:21:c0:85:a9:54:c4:a3:34:1e:a5:e8:85: 8f:e6:2b:c5:a9:88:2a:cc:a8:ac:be:97:ff:7d:8a:b5:a0:c3: 6a:e3:14:9d:b7:70:d7:76:ef:15:7a:2d:2f:57:28:5f:cf:0c: 38:26:68:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz NDQ2OEM3QjkwHhcNMjYwMzAxMDE0NDI2WhcNMjYwMzA4MDE0NDI2WjAYMRYwFAYD VQQDDA02OWEzOTlmYS0yNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6QkznlNxTUT8KOsgbEanG07gNb6ngbeoNosHlL3yyvsdG6SuqoVAQhOkvek +wDCy+QodoXLwSbhl+S8zX1GLjYiVrM4Jf24ea6lk00IzsdLb/nE21Nx5YPSLCtn Epm0NjgUQmg6NocjPJIreFJ7G12CXSPipIpkbyaa2pXXnIaGRuodA4sAoykhjvVZ aquYOV69WqjonhlRjGv+78DPfCVfhyxBYAxlTe+cR0VF6rcpBstRLFGUYuNHFZ4c 722ytvjU3fGjR8vZEYJ7O/E8JEAR6CpOoEwCr23HeUay5Mo2PFCHjzn4TxSCU9Ol 8dvfUBGd9+saCvf78RQr+TucRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6fMA5f bC5A9AXwEZ8hDkT0DF+9MB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzRFNy85ODFDMDU1OEVBRDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRU c1VoRlE1c2E1UHMwUm94N2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHIrAseUnaobYVIY9DpCYRlECGNQ9LqcY0u1rK4vL2ea2nCpBdXMFnUNGOKqK T7AA3zPlz6S9Vf+WhmZuiQLWzNAh1Tu1XyhHaDfYfffidjZgQWPyw9W1R6rrllEO W/A2KFExDHafCy+nR7PochnNTCE0Pt6fKexMxrlpUOKsEn1/iqvjTyCdxhmHRcIV 1EKOncS+RqNZW0MC5zMvjpU+NLBqdNT4s/m3MuaMFdgqdq0taJOo0tZqNBFhacW8 UYUibNKX+7R6pWx4z8okIcCFqVTEozQepeiFj+YrxamIKsyorL6X/32KtaDDauMU nbdw13bvFXotL1coX88MOCZo4w== -----END CERTIFICATE-----Generated at Sun Mar 1 22:48:14 2026 by rpki-client